Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0F7F7F6A072311ED8067812FC4F9AE02.roa
File:                     0F7F7F6A072311ED8067812FC4F9AE02.roa (raw, json)
Hash identifier:          IaM5JoKkMFAzjZpn+sEYIwIyVW6+qhIz6t87EVXHjEI=
Subject key identifier:   05:8A:0B:04:61:B5:8A:EC:D1:D6:81:D3:34:E4:0F:86:A5:2C:C3:5D
Certificate issuer:       /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial:       7CE9
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0F7F7F6A072311ED8067812FC4F9AE02.roa
Signing time:             Mon 16 Sep 2024 17:25:04 +0000
ROA not before:           Mon 16 Sep 2024 17:25:04 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     2914
IP address blocks:        103.13.80.0/22 maxlen: 23
                          202.68.64.0/20 maxlen: 23
                          203.4.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
                          rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31977 (0x7ce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
        Validity
            Not Before: Sep 16 17:25:04 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66e869f0-28be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a9:85:c0:b6:c4:a6:21:92:11:73:73:14:41:
                    ae:16:10:bd:7c:73:9f:3a:71:09:93:c0:02:de:5f:
                    e1:e5:64:a2:5a:6a:ba:51:a6:00:6d:c8:bc:f0:0d:
                    38:da:2d:1d:99:af:60:5b:fc:96:13:16:4b:02:64:
                    66:e3:c2:03:9f:7e:1b:01:03:e5:5a:c6:4b:41:c8:
                    49:d8:1a:89:85:36:80:44:d2:c2:9c:db:7a:32:5d:
                    f5:7e:0f:06:10:96:36:5d:89:04:90:f6:7c:ba:21:
                    0d:51:82:77:ab:d4:21:22:47:8d:a2:65:ae:f0:74:
                    a2:5d:fb:4d:50:09:23:40:c5:ed:1a:da:7b:02:33:
                    31:a4:79:bc:33:f1:84:bc:c8:d6:4e:67:03:a0:b7:
                    c3:60:db:81:e2:a9:22:28:72:22:f3:c5:cc:32:05:
                    83:b0:14:02:08:a1:7c:c1:19:b4:31:43:45:62:08:
                    a6:54:f0:48:eb:a4:34:9c:6d:50:c7:02:79:59:b0:
                    38:10:3b:06:12:a5:82:7c:e8:74:5d:9f:40:0c:49:
                    cb:2b:f3:c5:1a:fd:c3:40:60:41:17:f5:94:40:0a:
                    48:0f:7e:f1:80:00:b0:4e:9e:1b:a6:c2:2f:4e:63:
                    d8:3f:b7:3e:f4:7d:d4:87:31:8e:d7:f1:f7:fe:71:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8A:0B:04:61:B5:8A:EC:D1:D6:81:D3:34:E4:0F:86:A5:2C:C3:5D
            X509v3 Authority Key Identifier:
                keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0F7F7F6A072311ED8067812FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.80.0/22
                  202.68.64.0/20
                  203.4.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:58:6b:0c:15:df:fe:00:2b:b0:83:b3:0a:90:d6:c0:ab:86:
         01:fb:3b:53:0a:dd:ed:94:4f:d8:5c:8c:3c:65:bb:dc:f2:6e:
         38:17:99:43:20:4d:f4:13:0d:3b:98:78:8d:b8:7b:7c:29:f3:
         70:0a:f8:4b:88:e8:55:b0:3e:e0:9a:39:a0:3f:a6:66:cb:3a:
         a8:41:01:b9:57:5d:d4:8b:c5:28:bd:23:3a:ee:76:94:e7:97:
         f8:11:5d:6f:bd:66:db:92:47:71:f5:87:c3:0d:c3:d5:f0:b3:
         19:07:2a:6c:06:b0:fa:a0:c1:a8:64:a2:b3:03:a8:b1:6e:a8:
         ff:35:f6:d0:35:26:8c:37:55:42:34:01:98:a3:0d:39:18:bf:
         88:39:da:0f:88:ee:67:5f:2f:36:fd:95:18:aa:7b:72:f2:dd:
         c0:54:be:1d:fc:5f:66:b4:02:37:03:34:6b:45:da:c1:93:93:
         c4:eb:75:ad:a5:c9:f0:a1:48:e4:c8:a5:3b:2f:62:5e:54:49:
         7e:37:65:30:ee:aa:34:ac:ec:5b:9a:ff:e3:32:4b:1d:fc:04:
         ff:8e:b0:15:5f:73:2f:fc:42:1f:3a:af:86:37:b7:51:8a:83:
         f6:f1:1d:5f:37:c2:52:24:5a:ec:f5:1d:f6:62:8d:5b:80:aa:
         cf:c9:0c:9c
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICfOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1
Nzg5MjExMDAwHhcNMjQwOTE2MTcyNTA0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmU4NjlmMC0yOGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzqmFwLbEpiGSEXNzFEGuFhC9fHOfOnEJk8AC3l/h5WSiWmq6UaYAbci88A04
2i0dma9gW/yWExZLAmRm48IDn34bAQPlWsZLQchJ2BqJhTaARNLCnNt6Ml31fg8G
EJY2XYkEkPZ8uiENUYJ3q9QhIkeNomWu8HSiXftNUAkjQMXtGtp7AjMxpHm8M/GE
vMjWTmcDoLfDYNuB4qkiKHIi88XMMgWDsBQCCKF8wRm0MUNFYgimVPBI66Q0nG1Q
xwJ5WbA4EDsGEqWCfOh0XZ9ADEnLK/PFGv3DQGBBF/WUQApID37xgACwTp4bpsIv
TmPYP7c+9H3UhzGO1/H3/nEC5wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFAWKCwRh
tYrs0daB0zTkD4alLMNdMB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD
OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzkwMEQvRkNEQ0QzQTBBQzlEMTFFODkyQ0RBRDBEQzRGOUFFMDIvMEY3RjdGNkEw
NzIzMTFFRDgwNjc4MTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAJnDVADBATKREADBALLBNQwDQYJKoZIhvcNAQELBQADggEB
AAZYawwV3/4AK7CDswqQ1sCrhgH7O1MK3e2UT9hcjDxlu9zybjgXmUMgTfQTDTuY
eI24e3wp83AK+EuI6FWwPuCaOaA/pmbLOqhBAblXXdSLxSi9IzrudpTnl/gRXW+9
ZtuSR3H1h8MNw9XwsxkHKmwGsPqgwahkorMDqLFuqP819tA1Jow3VUI0AZijDTkY
v4g52g+I7mdfLzb9lRiqe3Ly3cBUvh38X2a0AjcDNGtF2sGTk8Trda2lyfChSOTI
pTsvYl5USX43ZTDuqjSs7Fua/+MySx38BP+OsBVfcy/8Qh86r4Y3t1GKg/bxHV83
wlIkWuz1HfZijVuAqs/JDJw=
-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:15 2024 by rpki-client on console-ams.rpki-client.org